Skip to content

Add --tls-details#2797

Draft
mtrmac wants to merge 4 commits intocontainers:mainfrom
mtrmac:tls-behavior
Draft

Add --tls-details#2797
mtrmac wants to merge 4 commits intocontainers:mainfrom
mtrmac:tls-behavior

Conversation

@mtrmac
Copy link
Contributor

@mtrmac mtrmac commented Feb 5, 2026 •
edited
Loading

Exposes containers/container-libs#623 .

Smoke-test:

% cat tls-details-pqc-only.yaml 
minVersion: "1.3"
namedGroups:
  - "X25519MLKEM768"
% bin/skopeo --tls-details ./tls-details-pqc-only.yaml inspect --raw docker://quay.io/foo
FATA[0000] Error parsing image name "docker://quay.io/foo": pinging container registry quay.io: Get "https://quay.io/v2/": EOF

(EOF is what happens when TLS negotiation fails, against this particular server right now.)

@packit-as-a-service
Copy link

packit-as-a-service bot commented Feb 6, 2026

Ephemeral COPR build failed. @containers/packit-build please check.

3 similar comments
@packit-as-a-service
Copy link

packit-as-a-service bot commented Feb 6, 2026

Ephemeral COPR build failed. @containers/packit-build please check.

@packit-as-a-service
Copy link

packit-as-a-service bot commented Feb 6, 2026

Ephemeral COPR build failed. @containers/packit-build please check.

@packit-as-a-service
Copy link

packit-as-a-service bot commented Feb 6, 2026

Ephemeral COPR build failed. @containers/packit-build please check.

@mtrmac mtrmac changed the title Add TLS options Add --tls-details Feb 6, 2026
@mtrmac
Copy link
Contributor Author

mtrmac commented Feb 7, 2026 •
edited
Loading

This is ready, except that it is blocked on merging the container-libs PRs.

We should probably have at least a smoke test added.

@mtrmac mtrmac mentioned this pull request Feb 10, 2026
Draft
@mtrmac
DO NOT MERGE: Use c/image @tls-behavior
90bf637 
Signed-off-by: Miloslav Trmač <mitr@redhat.com>
@mtrmac
Pass a SystemContext to signature.DefaultPolicy
bfca7ce 
This should not change behavior, but it reinforces the expectation
that the global SystemContext is always used.

Signed-off-by: Miloslav Trmač <mitr@redhat.com>
@mtrmac
Add an error return value to globalOptions.newSystemContext
5c8a972 
Should not change behavior.

Signed-off-by: Miloslav Trmač <mitr@redhat.com>
@mtrmac
Add a --tls-details option
b2c1f56 
Signed-off-by: Miloslav Trmač <mitr@redhat.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@mtrmac